Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/282867FDA1906735DA18D9838B50748AC97E1655.cer
File:                     282867FDA1906735DA18D9838B50748AC97E1655.cer (raw, json)
Hash identifier:          2m2Ke70WmcRatA8jMPKb0bwYGLKF1lIchtmbXBWX5Y0=
Subject key identifier:   28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07035F65259B7D83DC55C4432E075C2F142CD418
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Apr 2024 18:39:51 +0000
Certificate not after:    Tue 15 Apr 2025 18:44:51 +0000
Subordinate resources:    AS: 265484
                          IP: 168.197.152.0/22
                          IP: 2804:34d8::/32

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 09:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:03:5f:65:25:9b:7d:83:dc:55:c4:43:2e:07:5c:2f:14:2c:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 18:39:51 2024 GMT
            Not After : Apr 15 18:44:51 2025 GMT
        Subject: CN=282867FDA1906735DA18D9838B50748AC97E1655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fb:de:8e:f7:bc:6c:d1:8c:53:17:06:68:e9:
                    e7:ab:6b:f0:0c:d2:53:d6:17:5f:8a:86:02:48:b5:
                    da:71:db:3f:e1:75:ff:4b:83:05:d2:92:11:15:09:
                    a7:05:ea:c2:12:e3:6f:45:90:1d:ef:7a:e9:64:9f:
                    f1:37:06:06:6d:19:06:15:19:bd:28:66:f3:0a:ad:
                    42:f1:ce:6c:ca:59:b8:c2:82:48:45:00:d4:d3:e6:
                    3a:c7:76:83:46:8a:63:48:1f:6d:28:06:77:70:2a:
                    ac:4e:b0:26:65:46:00:4b:7f:7f:40:c8:7a:3f:de:
                    14:c6:08:85:89:92:95:6a:d2:fb:ca:bb:0c:53:92:
                    37:b2:7b:eb:02:d6:78:aa:07:41:9d:22:fd:34:05:
                    fc:c6:36:7f:9f:7a:5e:28:ce:65:9b:81:f3:3d:e2:
                    ca:f7:86:75:51:9d:82:80:cd:0f:e9:18:eb:75:14:
                    9c:b5:4f:6e:b3:83:b7:ab:e3:97:12:bb:7d:f3:3e:
                    51:be:7d:fa:6a:4f:d2:d7:79:68:f6:f0:66:8f:68:
                    dc:56:91:47:2a:76:04:40:c2:fb:2d:db:e5:25:66:
                    49:88:da:d1:56:82:ac:75:22:93:57:15:17:b1:c1:
                    eb:d8:93:2f:95:4c:06:51:23:02:5a:a4:b5:57:9d:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:28:67:FD:A1:90:67:35:DA:18:D9:83:8B:50:74:8A:C9:7E:16:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/282867FDA1906735DA18D9838B50748AC97E1655.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.152.0/22
                IPv6:
                  2804:34d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265484

    Signature Algorithm: sha256WithRSAEncryption
         89:29:d5:59:5b:84:84:ec:88:66:d3:3a:df:e2:95:59:b6:17:
         61:9b:5d:30:ca:45:38:3a:bc:a1:0f:2b:bf:25:f6:c3:f4:f6:
         d6:82:47:31:4e:ff:cb:d5:27:f1:68:97:fc:c6:7c:27:14:c1:
         29:3e:fb:97:dc:2d:08:e5:ad:7b:67:24:6a:e9:44:73:f2:0e:
         18:6b:07:ba:40:4a:10:56:7e:e4:95:be:c3:b6:cd:ca:89:d7:
         95:16:61:13:1d:d8:c5:69:fa:5b:61:d9:a9:33:b9:fb:e5:5e:
         22:1a:8f:5b:b5:47:17:68:f0:78:9f:d5:42:af:91:47:80:19:
         88:d1:a3:fd:6b:62:92:f0:68:69:63:d8:dd:7b:32:6d:fe:d1:
         65:96:7a:3c:41:10:1f:4d:97:73:7f:ee:45:25:6e:37:68:ab:
         2a:66:66:a8:3d:03:40:c4:0c:4a:25:ce:ed:bc:3c:59:31:59:
         db:f8:70:f8:e7:36:d3:64:14:d1:7f:7d:2c:17:7e:52:2e:e7:
         af:37:5b:4f:42:63:34:38:43:51:82:4b:27:ff:92:e8:22:87:
         d7:af:6a:77:32:5c:cb:27:e8:8e:24:0e:eb:f9:4c:fd:0a:81:
         29:3b:8a:ac:8e:a5:6b:31:e8:7f:4e:ae:01:62:32:cb:3b:83:
         6a:4c:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 13:23:56 2024 by rpki-client on console-ams.rpki-client.org